@shware/http 1.2.0 → 1.2.2

package/dist/vaild.cjs

@@ -0,0 +1,51 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/vaild.ts
+var vaild_exports = {};
+__export(vaild_exports, {
+  valid: () => valid
+});
+module.exports = __toCommonJS(vaild_exports);
+var import_detail = require("./error/detail.cjs");
+var import_status = require("./error/status.cjs");
+async function getTarget(request, target) {
+  switch (target) {
+    case "json":
+      return request.json();
+    default:
+      throw new Error(`Unsupported target: ${target}`);
+  }
+}
+async function valid(request, target, schema) {
+  const value = await getTarget(request, target);
+  const validator = await schema.safeParseAsync(value);
+  if (validator.success) return { data: validator.data, error: null };
+  const fieldViolations = validator.error.issues.map(
+    ({ path, message }) => ({ field: path.join("."), description: message })
+  );
+  const details = import_detail.Details.new().badRequest({ fieldViolations });
+  const error = import_status.Status.invalidArgument().response(details);
+  return { data: null, error };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  valid
+});
+//# sourceMappingURL=vaild.cjs.map

package/dist/vaild.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vaild.ts"],"sourcesContent":["import { BadRequest, Details } from './error/detail';\nimport { Status } from './error/status';\nimport type { ZodMiniType, z } from 'zod/mini';\n\nexport type Result<S extends ZodMiniType> =\n  | { data: z.infer<S>; error: null }\n  | { data: null; error: Response };\n\ntype Target = 'json' | 'form' | 'query' | 'param' | 'header' | 'cookie';\n\nasync function getTarget(request: Request, target: Target): Promise<unknown> {\n  switch (target) {\n    case 'json':\n      return request.json();\n    default:\n      throw new Error(`Unsupported target: ${target}`);\n  }\n}\n\nexport async function valid<S extends ZodMiniType>(\n  request: Request,\n  target: Target,\n  schema: S\n): Promise<Result<S>> {\n  const value = await getTarget(request, target);\n  const validator = await schema.safeParseAsync(value);\n  if (validator.success) return { data: validator.data, error: null };\n  const fieldViolations: BadRequest['fieldViolations'] = validator.error.issues.map(\n    ({ path, message }) => ({ field: path.join('.'), description: message })\n  );\n  const details = Details.new().badRequest({ fieldViolations });\n  const error = Status.invalidArgument().response(details);\n  return { data: null, error };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAoC;AACpC,oBAAuB;AASvB,eAAe,UAAU,SAAkB,QAAkC;AAC3E,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO,QAAQ,KAAK;AAAA,IACtB;AACE,YAAM,IAAI,MAAM,uBAAuB,MAAM,EAAE;AAAA,EACnD;AACF;AAEA,eAAsB,MACpB,SACA,QACA,QACoB;AACpB,QAAM,QAAQ,MAAM,UAAU,SAAS,MAAM;AAC7C,QAAM,YAAY,MAAM,OAAO,eAAe,KAAK;AACnD,MAAI,UAAU,QAAS,QAAO,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;AAClE,QAAM,kBAAiD,UAAU,MAAM,OAAO;AAAA,IAC5E,CAAC,EAAE,MAAM,QAAQ,OAAO,EAAE,OAAO,KAAK,KAAK,GAAG,GAAG,aAAa,QAAQ;AAAA,EACxE;AACA,QAAM,UAAU,sBAAQ,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC;AAC5D,QAAM,QAAQ,qBAAO,gBAAgB,EAAE,SAAS,OAAO;AACvD,SAAO,EAAE,MAAM,MAAM,MAAM;AAC7B;","names":[]}

package/dist/vaild.d.cts

@@ -0,0 +1,13 @@
+import { ZodMiniType, z } from 'zod/mini';
+
+type Result<S extends ZodMiniType> = {
+    data: z.infer<S>;
+    error: null;
+} | {
+    data: null;
+    error: Response;
+};
+type Target = 'json' | 'form' | 'query' | 'param' | 'header' | 'cookie';
+declare function valid<S extends ZodMiniType>(request: Request, target: Target, schema: S): Promise<Result<S>>;
+
+export { type Result, valid };

package/dist/vaild.d.ts

@@ -0,0 +1,13 @@
+import { ZodMiniType, z } from 'zod/mini';
+
+type Result<S extends ZodMiniType> = {
+    data: z.infer<S>;
+    error: null;
+} | {
+    data: null;
+    error: Response;
+};
+type Target = 'json' | 'form' | 'query' | 'param' | 'header' | 'cookie';
+declare function valid<S extends ZodMiniType>(request: Request, target: Target, schema: S): Promise<Result<S>>;
+
+export { type Result, valid };

package/dist/vaild.mjs

@@ -0,0 +1,26 @@
+// src/vaild.ts
+import { Details } from "./error/detail.mjs";
+import { Status } from "./error/status.mjs";
+async function getTarget(request, target) {
+  switch (target) {
+    case "json":
+      return request.json();
+    default:
+      throw new Error(`Unsupported target: ${target}`);
+  }
+}
+async function valid(request, target, schema) {
+  const value = await getTarget(request, target);
+  const validator = await schema.safeParseAsync(value);
+  if (validator.success) return { data: validator.data, error: null };
+  const fieldViolations = validator.error.issues.map(
+    ({ path, message }) => ({ field: path.join("."), description: message })
+  );
+  const details = Details.new().badRequest({ fieldViolations });
+  const error = Status.invalidArgument().response(details);
+  return { data: null, error };
+}
+export {
+  valid
+};
+//# sourceMappingURL=vaild.mjs.map

package/dist/vaild.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vaild.ts"],"sourcesContent":["import { BadRequest, Details } from './error/detail';\nimport { Status } from './error/status';\nimport type { ZodMiniType, z } from 'zod/mini';\n\nexport type Result<S extends ZodMiniType> =\n  | { data: z.infer<S>; error: null }\n  | { data: null; error: Response };\n\ntype Target = 'json' | 'form' | 'query' | 'param' | 'header' | 'cookie';\n\nasync function getTarget(request: Request, target: Target): Promise<unknown> {\n  switch (target) {\n    case 'json':\n      return request.json();\n    default:\n      throw new Error(`Unsupported target: ${target}`);\n  }\n}\n\nexport async function valid<S extends ZodMiniType>(\n  request: Request,\n  target: Target,\n  schema: S\n): Promise<Result<S>> {\n  const value = await getTarget(request, target);\n  const validator = await schema.safeParseAsync(value);\n  if (validator.success) return { data: validator.data, error: null };\n  const fieldViolations: BadRequest['fieldViolations'] = validator.error.issues.map(\n    ({ path, message }) => ({ field: path.join('.'), description: message })\n  );\n  const details = Details.new().badRequest({ fieldViolations });\n  const error = Status.invalidArgument().response(details);\n  return { data: null, error };\n}\n"],"mappings":";AAAA,SAAqB,eAAe;AACpC,SAAS,cAAc;AASvB,eAAe,UAAU,SAAkB,QAAkC;AAC3E,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO,QAAQ,KAAK;AAAA,IACtB;AACE,YAAM,IAAI,MAAM,uBAAuB,MAAM,EAAE;AAAA,EACnD;AACF;AAEA,eAAsB,MACpB,SACA,QACA,QACoB;AACpB,QAAM,QAAQ,MAAM,UAAU,SAAS,MAAM;AAC7C,QAAM,YAAY,MAAM,OAAO,eAAe,KAAK;AACnD,MAAI,UAAU,QAAS,QAAO,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;AAClE,QAAM,kBAAiD,UAAU,MAAM,OAAO;AAAA,IAC5E,CAAC,EAAE,MAAM,QAAQ,OAAO,EAAE,OAAO,KAAK,KAAK,GAAG,GAAG,aAAa,QAAQ;AAAA,EACxE;AACA,QAAM,UAAU,QAAQ,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC;AAC5D,QAAM,QAAQ,OAAO,gBAAgB,EAAE,SAAS,OAAO;AACvD,SAAO,EAAE,MAAM,MAAM,MAAM;AAC7B;","names":[]}

package/dist/webhook/index.cjs

@@ -0,0 +1,77 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/webhook/index.ts
+var webhook_exports = {};
+__export(webhook_exports, {
+  verifyStandardWebhook: () => verifyStandardWebhook
+});
+module.exports = __toCommonJS(webhook_exports);
+var import_crypto = require("crypto");
+var import_status = require("../error/status.cjs");
+var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+function verifyTimestamp(webhookTimestamp) {
+  const now = Math.floor(Date.now() / 1e3);
+  const timestamp = parseInt(webhookTimestamp, 10);
+  if (isNaN(timestamp)) {
+    throw import_status.Status.invalidArgument("invalid webhook timestamp").error();
+  }
+  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw import_status.Status.invalidArgument("webhook timestamp is too old").error();
+  }
+  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw import_status.Status.invalidArgument("webhook timestamp is too new").error();
+  }
+  return timestamp;
+}
+function verifyStandardWebhook(headers, payload, secret) {
+  const webhookId = headers["webhook-id"];
+  const webhookTimestamp = headers["webhook-timestamp"];
+  const webhookSignature = headers["webhook-signature"];
+  if (!webhookId || !webhookTimestamp || !webhookSignature) {
+    throw import_status.Status.invalidArgument("invalid webhook").error();
+  }
+  const timestamp = verifyTimestamp(webhookTimestamp);
+  const encoder = new TextEncoder();
+  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+  const hmac = (0, import_crypto.createHmac)("sha256", Buffer.from(secret, "base64"));
+  const digest = hmac.update(toSign).digest();
+  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
+  const expectedSignature = computedSignature.split(",")[1];
+  const passedSignatures = webhookSignature.split(" ");
+  for (const versionedSignature of passedSignatures) {
+    const [version, signature] = versionedSignature.split(",");
+    if (version !== "v1") continue;
+    if ((0, import_crypto.timingSafeEqual)(encoder.encode(signature), encoder.encode(expectedSignature))) {
+      try {
+        return JSON.parse(payload);
+      } catch (_) {
+        console.error("invalid payload", payload);
+        throw import_status.Status.invalidArgument("invalid webhook payload").error();
+      }
+    }
+  }
+  console.error("webhook verification failed");
+  throw import_status.Status.invalidArgument("invalid webhook signature").error();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  verifyStandardWebhook
+});
+//# sourceMappingURL=index.cjs.map

package/dist/webhook/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAA4C;AAC5C,oBAAuB;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASO,SAAS,sBACd,SACA,SACA,QACG;AACH,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,qBAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,WAAO,0BAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,YAAI,+BAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,qBAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}

package/dist/webhook/index.d.cts

@@ -0,0 +1,10 @@
+/**
+ * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+ * hono usage:
+ * ```ts
+ * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+ * ```
+ */
+declare function verifyStandardWebhook<T = unknown>(headers: Record<string, string>, payload: string, secret: string): T;
+
+export { verifyStandardWebhook };

package/dist/webhook/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+ * hono usage:
+ * ```ts
+ * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+ * ```
+ */
+declare function verifyStandardWebhook<T = unknown>(headers: Record<string, string>, payload: string, secret: string): T;
+
+export { verifyStandardWebhook };

package/dist/webhook/index.mjs

@@ -0,0 +1,52 @@
+// src/webhook/index.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { Status } from "../error/status.mjs";
+var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+function verifyTimestamp(webhookTimestamp) {
+  const now = Math.floor(Date.now() / 1e3);
+  const timestamp = parseInt(webhookTimestamp, 10);
+  if (isNaN(timestamp)) {
+    throw Status.invalidArgument("invalid webhook timestamp").error();
+  }
+  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw Status.invalidArgument("webhook timestamp is too old").error();
+  }
+  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw Status.invalidArgument("webhook timestamp is too new").error();
+  }
+  return timestamp;
+}
+function verifyStandardWebhook(headers, payload, secret) {
+  const webhookId = headers["webhook-id"];
+  const webhookTimestamp = headers["webhook-timestamp"];
+  const webhookSignature = headers["webhook-signature"];
+  if (!webhookId || !webhookTimestamp || !webhookSignature) {
+    throw Status.invalidArgument("invalid webhook").error();
+  }
+  const timestamp = verifyTimestamp(webhookTimestamp);
+  const encoder = new TextEncoder();
+  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+  const hmac = createHmac("sha256", Buffer.from(secret, "base64"));
+  const digest = hmac.update(toSign).digest();
+  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
+  const expectedSignature = computedSignature.split(",")[1];
+  const passedSignatures = webhookSignature.split(" ");
+  for (const versionedSignature of passedSignatures) {
+    const [version, signature] = versionedSignature.split(",");
+    if (version !== "v1") continue;
+    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {
+      try {
+        return JSON.parse(payload);
+      } catch (_) {
+        console.error("invalid payload", payload);
+        throw Status.invalidArgument("invalid webhook payload").error();
+      }
+    }
+  }
+  console.error("webhook verification failed");
+  throw Status.invalidArgument("invalid webhook signature").error();
+}
+export {
+  verifyStandardWebhook
+};
+//# sourceMappingURL=index.mjs.map

package/dist/webhook/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/webhook/index.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\nimport { Status } from '../error/status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport function verifyStandardWebhook<T = unknown>(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n): T {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload) as T;\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,cAAc;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASO,SAAS,sBACd,SACA,SACA,QACG;AACH,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,OAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,OAAO,WAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,QAAI,gBAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,OAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shware/http",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "private": false,
   "type": "module",
   "repository": {